DGNum/demarches-normaliennes
14
1
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

secu(graphql): log full queries and variables

Browse source
This commit is contained in:
Paul Chavard 2023-02-08 11:34:38 +01:00
parent 384e861f8e
commit f22cc8812b
4 changed files with 4 additions and 125 deletions
Download patch file Download diff file Expand all files Collapse all files

5
app/controllers/api/v2/graphql_controller.rb
View file

@ -1,6 +1,4 @@
class API::V2::GraphqlController < API::V2::BaseController
include GraphqlOperationLogConcern
def execute
result = API::V2::Schema.execute(query,
variables: variables,
@ -24,7 +22,8 @@ class API::V2::GraphqlController < API::V2::BaseController
super
payload.merge!({
graphql_operation: operation_log(query(fallback: ''), params[:operationName], to_unsafe_hash(params[:variables]))
graphql_query: query(fallback: params[:queryId]),
graphql_variables: to_unsafe_hash(params[:variables]).to_json
})
end